Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.mft
File: xTLcpO-wjHGnrwa-wCHIhxMNR48.mft (raw, json)
Hash identifier: N3FPC4wpL3Vl5k7Vf+jZvRFDKUKEpo4uVIwi7vi03yo=
Subject key identifier: E7:B3:E6:47:0D:6F:58:FE:98:84:79:05:5C:6C:10:AD:FE:EC:93:16
Authority key identifier: C5:32:DC:A4:EF:B0:8C:71:A7:AF:06:BE:C0:21:C8:87:13:0D:47:8F
Certificate issuer: /CN=c532dca4efb08c71a7af06bec021c887130d478f
Certificate serial: 019D390A0A181345C8D52789A11C273F5376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTLcpO-wjHGnrwa-wCHIhxMNR48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.mft
Manifest number: CB
Signing time: Sun 29 Mar 2026 10:00:52 +0000
Manifest this update: Sun 29 Mar 2026 10:00:52 +0000
Manifest next update: Mon 30 Mar 2026 10:00:52 +0000
Files and hashes: 1: SjFNiCOW9pffQRYTMpXHrm7q16g.roa (hash: sCyYv47zTnd77+VXWhZegzRk1ChPs3VRTcbNREbZLO8=)
2: xTLcpO-wjHGnrwa-wCHIhxMNR48.crl (hash: uDe85foCdYQL2i0YJNMNsT6PMLU4YW+0pSj9yuqQdhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTLcpO-wjHGnrwa-wCHIhxMNR48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:0a:18:13:45:c8:d5:27:89:a1:1c:27:3f:53:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c532dca4efb08c71a7af06bec021c887130d478f
Validity
Not Before: Mar 29 10:00:52 2026 GMT
Not After : Mar 30 10:00:52 2026 GMT
Subject: CN=e7b3e6470d6f58fe988479055c6c10adfeec9316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:b0:08:83:9d:bb:d4:41:a2:7f:f7:c8:4f:
7d:0d:d7:0f:61:60:c5:71:20:4a:c3:6b:d8:d6:83:
60:80:ae:56:32:bb:35:f1:1c:7e:5f:fe:2a:bc:b4:
0c:a6:02:07:d8:9d:2e:93:fd:73:d2:f3:66:eb:e8:
72:d2:ca:27:97:3a:da:73:fb:53:b1:4f:9c:0e:47:
71:6e:02:75:c6:bd:12:fc:2f:46:14:5c:0d:94:66:
af:bf:77:79:70:d4:6a:e9:3b:24:ee:1e:95:86:6a:
02:14:d5:83:78:06:4a:e0:d1:cb:3c:7e:5b:a4:c1:
ac:b5:2a:d8:e5:4e:3c:00:c2:b8:45:ad:76:72:88:
5b:a1:70:66:54:f2:a5:a7:3f:18:df:fd:ac:0a:7d:
f6:c7:46:7d:61:51:cf:b6:c0:00:7a:5b:0b:aa:fb:
54:10:65:af:c3:80:ed:76:e4:f2:74:1d:c5:e7:7f:
c6:46:a7:21:5c:dc:58:70:88:cc:b3:92:72:88:3c:
25:78:9d:11:0a:8c:28:73:3c:a2:3f:58:b0:b8:22:
f2:9e:8f:5a:76:45:af:3e:8a:48:37:38:93:2b:eb:
1a:4f:a9:4e:2c:54:de:c7:c2:67:ee:c6:b2:98:29:
97:7a:99:8c:e9:72:a6:29:c1:64:e6:87:5f:ba:b1:
b2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B3:E6:47:0D:6F:58:FE:98:84:79:05:5C:6C:10:AD:FE:EC:93:16
X509v3 Authority Key Identifier:
keyid:C5:32:DC:A4:EF:B0:8C:71:A7:AF:06:BE:C0:21:C8:87:13:0D:47:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTLcpO-wjHGnrwa-wCHIhxMNR48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:bb:63:39:be:67:a7:90:e2:01:68:b4:a5:e0:57:6f:7c:d5:
3d:b8:1e:c4:bf:35:14:41:5b:c4:97:fd:46:3d:0a:cd:19:88:
54:22:8b:6a:c7:77:53:e2:9b:2f:01:71:dc:68:d8:3a:4a:d9:
ea:e9:38:d0:61:7f:5d:2c:00:df:13:8c:c8:63:5b:6c:9d:38:
36:bd:cf:21:d1:15:71:c0:ee:d6:6b:34:d9:bd:5e:60:a8:16:
ca:68:42:b7:83:42:7a:cb:55:11:58:1d:93:a7:a8:c5:33:83:
20:45:43:88:86:ff:56:ae:7d:ee:9b:98:5e:84:3e:f2:04:96:
b7:2f:1a:a2:c0:07:c5:a4:be:25:d1:af:63:08:eb:59:83:c5:
7f:da:35:6a:47:3a:01:df:15:e4:79:8f:86:ff:4f:c8:7a:54:
2f:9a:89:02:a7:8c:19:fb:1c:ef:49:0c:9d:3e:32:a0:8f:a5:
58:bb:82:e7:1a:f5:a4:95:d9:f6:f9:a2:c2:62:8d:61:af:6b:
ad:a6:b5:7d:3f:cf:f4:59:9d:d0:b9:7a:1f:76:a7:6e:fe:50:
b8:45:ff:46:c5:b8:5b:32:95:4a:2b:98:0d:fb:32:01:6b:22:
b0:33:9b:03:0d:7c:84:a3:50:d5:1a:8f:e0:73:07:81:db:19:
fa:8f:3c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:04 2026 by rpki-client